2023-17 – Unclear requirements from customer
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Midden |
| Impact | Midden |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
Bespoke software development, customer project
Dreiging
When a new project is started, no (or unclear) agreements are made about information security or compliance requirements, causing rework (best case) or data leaks (worst case).
Risicocategorie
Vertrouwelijkheid, Integriteit, Beschikbaarheid
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Midden | Midden | Midden | Laag |
Behandelingsmaatregelen
- Address specific security requirements in Customer on- and off- boarding process (A.5.8 Information security in project management)
- Set clear requirements in Sprinting process